Raise puppet-postgres memory

bump artifactapi to v3.20.0 (#565 )
v3.20.0 adds virtual puppet repositories and filtered remote Forge release listings. - pin api, ui and image-keeper to v3.20.0 Reviewed-on: #565 Co-authored-by: unkin-agent <unkin-agent@unkin.net> Co-committed-by: unkin-agent <unkin-agent@unkin.net>
2026-10-22 21:34:23 +11:00 · 2026-10-20 22:25:18 +11:00
29 changed files with 8 additions and 311 deletions
@@ -36,7 +36,7 @@ spec:
              mountPath: /combined-certs
      containers:
        - name: api
-          image: artifactapi.k8s.syd1.au.unkin.net/docker-internal/artifactapi:v3.19.0
+          image: artifactapi.k8s.syd1.au.unkin.net/docker-internal/artifactapi:v3.20.0
          imagePullPolicy: IfNotPresent
          ports:
            - containerPort: 8000
@@ -49,7 +49,7 @@ spec:
            capabilities:
              drop: ["ALL"]
        - name: api
-          image: artifactapi.k8s.syd1.au.unkin.net/docker-internal/artifactapi:v3.19.0
+          image: artifactapi.k8s.syd1.au.unkin.net/docker-internal/artifactapi:v3.20.0
          imagePullPolicy: IfNotPresent
          command: ["/keeper/true"]
          volumeMounts:
@@ -69,7 +69,7 @@ spec:
            capabilities:
              drop: ["ALL"]
        - name: ui
-          image: artifactapi.k8s.syd1.au.unkin.net/docker-internal/artifactapi-ui:v3.19.0
+          image: artifactapi.k8s.syd1.au.unkin.net/docker-internal/artifactapi-ui:v3.20.0
          imagePullPolicy: IfNotPresent
          command: ["true"]
          resources:
@@ -22,7 +22,7 @@ spec:
      automountServiceAccountToken: true
      containers:
        - name: ui
-          image: artifactapi.k8s.syd1.au.unkin.net/docker-internal/artifactapi-ui:v3.19.0
+          image: artifactapi.k8s.syd1.au.unkin.net/docker-internal/artifactapi-ui:v3.20.0
          imagePullPolicy: IfNotPresent
          ports:
            - containerPort: 80
@@ -1,7 +0,0 @@
---
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-
-resources:
-  - mta1.yaml
-  - mta2.yaml
@@ -1,13 +0,0 @@
---
-apiVersion: bind.unkin.net/v1alpha1
-kind: DNSRecord
-metadata:
-  name: edge-mta1-a
-  namespace: bind-external
-spec:
-  zoneRef: edge-unkin-net
-  name: "mta1"
-  type: A
-  ttl: 3600
-  values:
-    - 66.226.148.207
@@ -1,13 +0,0 @@
---
-apiVersion: bind.unkin.net/v1alpha1
-kind: DNSRecord
-metadata:
-  name: edge-mta2-a
-  namespace: bind-external
-spec:
-  zoneRef: edge-unkin-net
-  name: "mta2"
-  type: A
-  ttl: 3600
-  values:
-    - 66.226.149.50
@@ -1,6 +0,0 @@
---
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-
-resources:
-  - a
@@ -8,6 +8,4 @@ resources:
  - tsigkey.yaml
  - zones.yaml
  - acme-unkin-net
-  - main-unkin-net
-  - edge-unkin-net
  - agent-dns-rolebinding.yaml
@@ -1,6 +0,0 @@
---
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-
-resources:
-  - mail-in.yaml
@@ -1,13 +0,0 @@
---
-apiVersion: bind.unkin.net/v1alpha1
-kind: DNSRecord
-metadata:
-  name: main-mail-in-a
-  namespace: bind-external
-spec:
-  zoneRef: main-unkin-net
-  name: "mail-in"
-  type: A
-  ttl: 3600
-  values:
-    - 103.216.191.185
@@ -1,13 +0,0 @@
---
-apiVersion: bind.unkin.net/v1alpha1
-kind: DNSRecord
-metadata:
-  name: main-acme-challenge-cname
-  namespace: bind-external
-spec:
-  zoneRef: main-unkin-net
-  name: "_acme-challenge"
-  type: CNAME
-  ttl: 3600
-  values:
-    - _acme-challenge.main.acme.unkin.net.
@@ -1,13 +0,0 @@
---
-apiVersion: bind.unkin.net/v1alpha1
-kind: DNSRecord
-metadata:
-  name: main-au-syd1-pve-api-cname
-  namespace: bind-external
-spec:
-  zoneRef: main-unkin-net
-  name: "au-syd1-pve-api"
-  type: CNAME
-  ttl: 3600
-  values:
-    - lb1.unkin.net.
@@ -1,13 +0,0 @@
---
-apiVersion: bind.unkin.net/v1alpha1
-kind: DNSRecord
-metadata:
-  name: main-au-syd1-pve-cname
-  namespace: bind-external
-spec:
-  zoneRef: main-unkin-net
-  name: "au-syd1-pve"
-  type: CNAME
-  ttl: 3600
-  values:
-    - lb1.unkin.net.
@@ -1,13 +0,0 @@
---
-apiVersion: bind.unkin.net/v1alpha1
-kind: DNSRecord
-metadata:
-  name: main-grafana-cname
-  namespace: bind-external
-spec:
-  zoneRef: main-unkin-net
-  name: "grafana"
-  type: CNAME
-  ttl: 3600
-  values:
-    - lb1.unkin.net.
@@ -1,15 +0,0 @@
---
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-
-resources:
-  - acme-challenge.yaml
-  - au-syd1-pve.yaml
-  - au-syd1-pve-api.yaml
-  - grafana.yaml
-  - lidarr.yaml
-  - nzbget.yaml
-  - prowlarr.yaml
-  - radarr.yaml
-  - readarr.yaml
-  - sonarr.yaml
@@ -1,13 +0,0 @@
---
-apiVersion: bind.unkin.net/v1alpha1
-kind: DNSRecord
-metadata:
-  name: main-lidarr-cname
-  namespace: bind-external
-spec:
-  zoneRef: main-unkin-net
-  name: "lidarr"
-  type: CNAME
-  ttl: 3600
-  values:
-    - lb1.unkin.net.
@@ -1,13 +0,0 @@
---
-apiVersion: bind.unkin.net/v1alpha1
-kind: DNSRecord
-metadata:
-  name: main-nzbget-cname
-  namespace: bind-external
-spec:
-  zoneRef: main-unkin-net
-  name: "nzbget"
-  type: CNAME
-  ttl: 3600
-  values:
-    - lb1.unkin.net.
@@ -1,13 +0,0 @@
---
-apiVersion: bind.unkin.net/v1alpha1
-kind: DNSRecord
-metadata:
-  name: main-prowlarr-cname
-  namespace: bind-external
-spec:
-  zoneRef: main-unkin-net
-  name: "prowlarr"
-  type: CNAME
-  ttl: 3600
-  values:
-    - lb1.unkin.net.
@@ -1,13 +0,0 @@
---
-apiVersion: bind.unkin.net/v1alpha1
-kind: DNSRecord
-metadata:
-  name: main-radarr-cname
-  namespace: bind-external
-spec:
-  zoneRef: main-unkin-net
-  name: "radarr"
-  type: CNAME
-  ttl: 3600
-  values:
-    - lb1.unkin.net.
@@ -1,13 +0,0 @@
---
-apiVersion: bind.unkin.net/v1alpha1
-kind: DNSRecord
-metadata:
-  name: main-readarr-cname
-  namespace: bind-external
-spec:
-  zoneRef: main-unkin-net
-  name: "readarr"
-  type: CNAME
-  ttl: 3600
-  values:
-    - lb1.unkin.net.
@@ -1,13 +0,0 @@
---
-apiVersion: bind.unkin.net/v1alpha1
-kind: DNSRecord
-metadata:
-  name: main-sonarr-cname
-  namespace: bind-external
-spec:
-  zoneRef: main-unkin-net
-  name: "sonarr"
-  type: CNAME
-  ttl: 3600
-  values:
-    - lb1.unkin.net.
@@ -1,9 +0,0 @@
---
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-
-resources:
-  - a
-  - mx
-  - txt
-  - cname
@@ -1,14 +0,0 @@
---
-apiVersion: bind.unkin.net/v1alpha1
-kind: DNSRecord
-metadata:
-  name: main-apex-mx
-  namespace: bind-external
-spec:
-  zoneRef: main-unkin-net
-  name: "@"
-  type: MX
-  ttl: 3600
-  values:
-    - "10 mta1.edge.unkin.net."
-    - "20 mta2.edge.unkin.net."
@@ -1,6 +0,0 @@
---
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-
-resources:
-  - apex.yaml
@@ -1,13 +0,0 @@
---
-apiVersion: bind.unkin.net/v1alpha1
-kind: DNSRecord
-metadata:
-  name: main-apex-txt
-  namespace: bind-external
-spec:
-  zoneRef: main-unkin-net
-  name: "@"
-  type: TXT
-  ttl: 3600
-  values:
-    - '"v=spf1 ip4:66.226.148.207 ip4:66.226.149.50 -all"'
@@ -1,13 +0,0 @@
---
-apiVersion: bind.unkin.net/v1alpha1
-kind: DNSRecord
-metadata:
-  name: main-dmarc-txt
-  namespace: bind-external
-spec:
-  zoneRef: main-unkin-net
-  name: "_dmarc"
-  type: TXT
-  ttl: 3600
-  values:
-    - '"v=DMARC1; p=none; rua=mailto:dmarc@unkin.net; adkim=r; aspf=r"'
@@ -1,7 +0,0 @@
---
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-
-resources:
-  - apex.yaml
-  - dmarc.yaml
@@ -28,39 +28,3 @@ spec:
      type: A
      ttl: 3600
      values: ["103.216.191.185"]
---
-# Public mail zones, delegated from Google Cloud DNS to acme-ns1.unkin.net like
-# acme.unkin.net. DNSRecords are applied with the zone's update key.
-apiVersion: bind.unkin.net/v1alpha1
-kind: BindZone
-metadata:
-  name: main-unkin-net
-  namespace: bind-external
-spec:
-  clusterRef: bind-external
-  zoneName: main.unkin.net
-  type: primary
-  defaultTTL: 3600
-  dynamicUpdate: true
-  updateKeyRef: certmanager
-  allowTransfer:
-    - key certmanager
-  nameservers:
-    - acme-ns1.unkin.net.
---
-apiVersion: bind.unkin.net/v1alpha1
-kind: BindZone
-metadata:
-  name: edge-unkin-net
-  namespace: bind-external
-spec:
-  clusterRef: bind-external
-  zoneName: edge.unkin.net
-  type: primary
-  defaultTTL: 3600
-  dynamicUpdate: true
-  updateKeyRef: certmanager
-  allowTransfer:
-    - key certmanager
-  nameservers:
-    - acme-ns1.unkin.net.
@@ -85,7 +85,7 @@ spec:
      archive_mode: "on"
      archive_timeout: 5min
      dynamic_shared_memory_type: posix
-      effective_cache_size: 256MB
+      effective_cache_size: 1GB
      full_page_writes: "on"
      log_destination: csvlog
      log_directory: /controller/log
@@ -98,7 +98,7 @@ spec:
      max_parallel_workers: "16"
      max_replication_slots: "16"
      max_worker_processes: "16"
-      shared_buffers: 128MB
+      shared_buffers: 256MB
      shared_memory_type: mmap
      ssl_max_protocol_version: TLSv1.3
      ssl_min_protocol_version: TLSv1.3
@@ -127,10 +127,10 @@ spec:
  resources:
    limits:
      cpu: 500m
-      memory: 512Mi
+      memory: 2Gi
    requests:
      cpu: 50m
-      memory: 256Mi
+      memory: 1Gi
  smartShutdownTimeout: 180
  startDelay: 3600
  stopDelay: 1800
Author	SHA1	Message	Date
unkin-agent	b658962c26	Raise puppet-postgres memory ci/woodpecker/pr/pre-commit Pipeline was successful Details ci/woodpecker/pr/kubeconform Pipeline was successful Details	2026-10-22 21:34:23 +11:00
unkin-agent	45aa23942f	bump artifactapi to v3.20.0 (#565 ) v3.20.0 adds virtual puppet repositories and filtered remote Forge release listings. - pin api, ui and image-keeper to v3.20.0 Reviewed-on: #565 Co-authored-by: unkin-agent <unkin-agent@unkin.net> Co-committed-by: unkin-agent <unkin-agent@unkin.net>	2026-10-20 22:25:18 +11:00